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CLAIMS 

The following is a complete listing of the claims. 

I . (currently amended) A method of operating a first security module in a 
computer, the method comprising the acts of: 

detecting a second security moduie in the computer^ wherein the second security 
module is configured to perform the same functions of th e same typo as the 
first security module; 

determining whether a key associated with the second security module is stored at the 

first security module; and 
obtaining the key associated with the second security module if the key associated 

with the second security module is not stored at the first security module. 

2. (previously presented) The method set forth in claim 1, wherein each of the 
first security module and the second security module comprises a trusted platform module 
CTPM"), 

3. (original) The method set forth in claim 1, comprising the act of requesting 
the key from the second security module. 

4. (previously presented) The method set forth in claim 1 , comprising the act of 
sending a public key from the first security module to the second security module if the key 
associated with the second security module is not stored at the first security module. 
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5. (previously presented) The method set forth in claim 1 , comprising the act of 
sending a public key along with validation information from the first security module to the 
second security module if the key associated with the second security module is not stored at 
the first security module. 

6. (original) The method set forth in claim 1, comprising the act of storing the 
key in a memory associated with the first security module. 

7. (previously presented) The method set forth in claim 1, wherein the key is a 
private key, 

8. (currently amended) A first security module in a computer, comprising: 
a detector that is adapted to detect another security module configured to 

perform the same functions of the somo t^po as the first security module in the 
computer and determine whether one of a plurality of keys stored at the first security 
module is associated with the other security module; and 

a device that obtains at least one key associated with the other security module 
if the one of the plurality of keys stored at the first security module is not associated 
with the other security module. 

9. (previously presented) The first security module set forth in claim 8, wherein 
the first security module comprises a trusted platform module CTPM"), 
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10. (previously presented) The first security module set forth in claim 8, wherein 
the first security module is adapted to request the at least one key from the other security 
module. 

1 1 . (previously presented) The fu-st security module set forth in claim 8, wherein 
the first security module is adapted to send a public key to the other security module if the at 
least one key is not stored at the first security module. 

12. (previously presented) The first security module set forth in claim 8, wherein 
the first security module is adapted to send a public key along with validation infomiation to 
the other security module if the at least one key is not stored at the first security module. 

13. (previously presented) The first security module set forth in claim 8, wherein 
the at least one key is a private key. 

14» (currently amended) A first security module in a computer, comprising: 
means for detecting another security module in the computer, wherein the other 

security module is configured to perform the same functions of the same typo 

as the first security module; 
means for determining whether a key associated with the other security module is 

stored.at the first security module; and 
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means for obtaining the key associated with the other security module if the key 
associated with the other security module is not stored at the first security 
module, 

15. (previously presented) The first security module set forth in claim 1 4, 
wherein the first security module comprises a trusted platform module ("TPM"). 

1 6. (previously presented) The first security module set forth in claim 1 4, 
wherein the first security module is adapted to request the key from the other security module. 

17. (previously presented) The first security module set forth in claim 14, 
wherein the first security module is adapted to send a public key to the other security module 
if the key associated with the other security module is not stored at the first security module. 

1 8. (previously presented) The first security module set forth in claim 1 4, 
wherein the first security module is adapted to send a public key along with validation 
information to the other security module if the key associated with the other security module 
is not stored at the first security module. 

19. (previously presented) The first security module set forth in claim 1 4, 
wherein the first security module is adapted to store the key in a memory associated with the 
first security module. 
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20. (previously presented) The iBrst security module set forth in claim 1 4, 
wherein the key comprises a private key. 

2 1 . (currently amended) A computer comprising: 
a processor configured to execute program instructions; 

a storage device configured to store program instructions to be delivered to the 

processor; 
a first security module; and 

a second security module, wherein the second security module is configured to 

perform the same fiinctions of the aame type as the first security module, the 
first security module comprising: 

a detector adapted to detect the second security module and determine whether 
one of a plurality of keys stored at the first security module is 
associated with the second security module^ wherein the first security 
module obtains at least one key associated with the second security 
module if one of the plurality of keys stored at the first security module 
is not associated with the second security module. 

22. (previously presented) The computer set forth in claim 21, wherein each of 
the first security module and the second security module comprises a trusted platform module 
(*TPM"). 
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23. (previously presented) The conlfiuter set forth in claim 21 , wherein the first 
security module is adapted to request the at least one key from the second security module. 

24. (previously presented) The computer set forth in claim 21, wherein the first 
security module is adapted to send a public key to the second security module if the at least 
one key is not stored at the first security module, ■ 

25. (previously presented) The computer set forth in claim 21, wherein the first 
security module is adapted to send a public key along with validation information to the 
second security module if the at least one key is hot stored at the first security module. 

26. (previously presented) The computer set forth in claim 21, wherein the at 
least one key is a private key. 

27. (previously presented) A niethod of unsealing information from a plurality of 
security modules, the method comprising the acts of: 

detaching an identifier from sealed infortidiaLtion for one of the plurality of security 
modules; 

decrypting the sealed information With a key that is associated with another of the 

plurality of security modules; 
calculating a hash of the decrypted sealed information; and 
comparing the calculated hash to thi&^idehtifier to determine if the key was used to 

encrypt the sealed informati6n; : ■ 
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returning a decrypt key found mess^jge if the key is the key used to encrypt the sealed 
information or returning a decrypt key not found message if the key is not the 
key used to encrypt the sealed information. 

28. (original) The method set forth in :claim 27, wherein the plurality of security 
modules comprise trusted platform modiilqs ("TPKIs"). 

29-30. (canceled) 

3 1 . (currently amended) A comjputer lietwork, comprising: 
a plurality of computers; 

a network infrastructure that connects the iilurality of computers together; 
at least one of the plurality of compjuters comprising: 
a first security module; and |^ r; 

a second security module, Wherein: the second security module is configured to 
perform the same functions of th e sqm e typ e as the first security module, the first 
security module comprising: 

a detector adapted to^tletect t^ second security module and determine 
whether a ke|f associated with the second security module is 
stored at the fii^t seiciirity module, wherein the first security 
module obtaihis the^kby associated with the second security 
module if tiiefkby asi^ociated with the second security module is 
not stored at ihe first^ecurity module. 
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32. (previously presented) The computer network, as set forth in claim 31, 
wherein each of the first security module and the second security module comprises a trusted 
platform module ("TPM"). 

33. (previously presented) The method set forth in claim 1, comprising the act of 
accessing data encrypted by the second security module using the key associated with the 
second security module if the second security module fails. 

34. (previously presented) The first security module set forth in claim 8, wherein 
the first security module is configured to decrypt data encrypted by the other security module 
if the other security module fails. 
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